{"list":"other","total":64,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"2011.00931","title":"Point Transformer","created":"2020-11-02","cited_by_count":1470},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2105.10497","title":"Intriguing Properties of Vision Transformers","created":"2021-05-21","cited_by_count":446},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1901.09192","title":"SelectiveNet: A Deep Neural Network with an Integrated Reject Option","created":"2019-01-26","cited_by_count":350},{"id":"1705.06640","title":"DeepXplore: Automated Whitebox Testing of Deep Learning Systems","created":"2017-05-18","cited_by_count":311},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1904.00760","title":"Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNet","created":"2019-03-20","cited_by_count":260},{"id":"1708.08559","title":"DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars","created":"2017-08-28","cited_by_count":251},{"id":"2103.14586","title":"Understanding Robustness of Transformers for Image Classification","created":"2021-03-26","cited_by_count":249},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"1803.07519","title":"DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems","created":"2018-03-20","cited_by_count":147},{"id":"1710.05468","title":"Generalization in Deep Learning","created":"2017-10-16","cited_by_count":146},{"id":"1808.08444","title":"Guiding Deep Learning System Testing using Surprise Adequacy","created":"2018-08-25","cited_by_count":124},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"2111.08644","title":"UBnormal: New Benchmark for Supervised Open-Set Video Anomaly Detection","created":"2021-11-16","cited_by_count":93},{"id":"1807.01216","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","created":"2018-07-03","cited_by_count":87},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1805.05206","title":"DeepMutation: Mutation Testing of Deep Learning Systems","created":"2018-05-14","cited_by_count":67},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2009.06701","title":"Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack","created":"2020-09-14","cited_by_count":64},{"id":"1910.04443","title":"Misbehaviour Prediction for Autonomous Driving Systems","created":"2019-10-10","cited_by_count":55},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1812.10812","title":"DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems","created":"2018-12-27","cited_by_count":50},{"id":"2005.02313","title":"Adversarial Training against Location-Optimized Adversarial Patches","created":"2020-05-05","cited_by_count":50},{"id":"1707.03501","title":"NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles","created":"2017-07-12","cited_by_count":48},{"id":"1812.05793","title":"Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing","created":"2018-12-14","cited_by_count":48},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45},{"id":"2004.13799","title":"Minority Reports Defense: Defending Against Adversarial Patches","created":"2020-04-28","cited_by_count":36},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29},{"id":"1904.13195","title":"Test Selection for Deep Learning Systems","created":"2019-04-30","cited_by_count":27},{"id":"2004.11573","title":"Towards Characterizing Adversarial Defects of Deep Learning Software from the Lens of Uncertainty","created":"2020-04-24","cited_by_count":26},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24},{"id":"2009.13747","title":"Dynamic Slicing for Deep Neural Networks","created":"2020-09-29","cited_by_count":16},{"id":"1512.01891","title":"Sparsifying Neural Network Connections for Face Recognition","created":"2015-12-07","cited_by_count":15},{"id":"1911.01952","title":"Coverage Guided Testing for Recurrent Neural Networks","created":"2019-11-05","cited_by_count":15},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14},{"id":"2109.07514","title":"DeepMetis: Augmenting a Deep Learning Test Set to Increase its Mutation Score","created":"2021-09-15","cited_by_count":12},{"id":"1910.02352","title":"Operational Calibration: Debugging Confidence Errors for DNNs in the Field","created":"2019-10-06","cited_by_count":6}],"next_cursor":null}